CMOD permissions for /data and /uploads

[UDPride]

This goes for both Photopost Pro and Photopost Classifieds. Im trying to lock down my site with better security and I noticed my template folders/files were compromised recently with the Yahoo Counter trojan. I have since CMOD'd other folders to 755 and files to 644. Right now my /uploads and /data folders are 777. Can (should) I make these folders 755 and subfolders (thumbs etc)? And can I make all the images 644? Ive made all my other Post/Classified folders 755 and most files 644 and have not run into any issues yet.

Whats the default when new photos or classifieds are posted? And if these files and/or folders must be 777, why?

Thanks

[Chuck S]

Your data and uploads folders need to be 777 permissions to allow file uploads and image processing moving categories to be created etc. Without this your gallery will not work.

[UDPride]

OK. is this a security issue I should be concerned with?

[Chuck S]

Not really its a known thing that to do file uploads a directory needs to be 777